$ 0 0 "An Advanced Persistent Threat based challenge" Evidence file: digital-forensics.sans.org/retrieve/evidence06.zip